Privacy & data protection
How we handle your information.
This notice explains what the website collects, why it is used and the choices available to you.
Last updated 21 October 2026
Who is responsible for your information?
Shah Lalji Nangpar Academy is responsible for deciding how personal information submitted through this website is used. Questions about this notice or a privacy request can be sent to info@shahlalji.ac.ke.
Information we collect
When a parent or guardian submits an admissions enquiry, we collect their name, email address and telephone number, together with the child’s age, intended year group and the message provided. Authorised staff accounts also use sign-in information to access the school dashboard. If a visitor comments on a story, we collect the display name and comment they choose to submit. Comments are reviewed before publication.
Like most hosted websites, our service providers may process limited technical information needed to deliver and secure the site, such as request timestamps, device or browser information and IP addresses.
Why we use it
Enquiry details are used to respond to the family, discuss admissions and arrange a visit where requested. Staff authentication information is used to protect the dashboard and maintain the website. We do not use enquiry information for unrelated advertising. Story reactions and comments are used only to support respectful engagement with school news.
Children’s information and school imagery
The enquiry form is intended for completion by a parent or guardian. Learner photographs and stories are managed by authorised school staff and should only be published where the school has an appropriate lawful basis and any required permissions under its safeguarding and media procedures.
Service providers and transfers
The website uses Vercel for hosting and Supabase for database, storage and staff authentication services. Cloudflare Turnstile may process limited technical information to protect public forms from automated abuse. When email notifications are enabled, Resend delivers new-enquiry and comment-review notices to authorised staff. These providers process information on the school’s behalf and may process it outside Kenya. The school is responsible for ensuring that any cross-border processing is covered by appropriate safeguards.
Cookies and browser storage
The public site does not currently use advertising or analytics cookies. Essential cookies are used when authorised staff sign in so that the dashboard session remains secure. The privacy notice stores a small acknowledgement in your browser’s local storage so it does not appear on every visit. A functional identifier and local browser setting prevent repeated reactions to the same story; they are not used for advertising or cross-site tracking.
If optional analytics or marketing tools are introduced later, this notice and the site’s consent controls must be updated before those tools are enabled.
Retention and security
Personal information should be retained only for as long as it is needed for the purpose described above or to meet a legal obligation. Access to submitted enquiries and website management tools is limited to authorised staff. The school should periodically review and delete information that is no longer required.
Your data-protection rights
Subject to Kenyan data-protection law, you may ask to be informed about the use of your personal information, access it, object to certain processing, or request correction or deletion where applicable. A parent or guardian may exercise relevant rights for a child.
Contact the school first at info@shahlalji.ac.ke. You may also contact the Office of the Data Protection Commissioner if you believe your data-protection rights have been infringed.
